Questions tagged [signature]
This tag should be used for questions regarding digital signatures. A digital signature proves that the owner of a private key produced or endorsed a given message. These are used in transactions to prove that an output can be spent in a transaction.
321
questions
1
vote
1answer
55 views
How to verify if a transaction is signed correctly?
Given an arbitrary signed raw transaction, how can we easily verify if all inputs are correctly signed (assuming all inputs are existent/unspent and the fee is higher than zero)? Bitcoin core's RPC ...
0
votes
1answer
29 views
Signing transaction offline - manual way vs. Electrum
Being inspired by the thread (Redeeming a raw transaction step by step example required) I wanted to understand transaction signatures on the byte level.
So I created my own Linux scripts that:
...
0
votes
1answer
21 views
Can hashtype in BTC scriptSig contained value other than 0x01, 0x02, 0x03, 0x80, 0x81, 0x82, 0x83?
As per hashtype value in https://en.bitcoin.it/wiki/OP_CHECKSIG or https://developer.bitcoin.org/devguide/transactions.html#signature-hash-types, hashtype could either be 0x01, 0x02, 0x03, 0x80, 0x81, ...
0
votes
1answer
39 views
Relationship of R/S signature in between signed message and DER signature
this time is difficult for me to explain problem i was facing. i realize that R/S signature in DER signature is not match to the 1 in bitcoin signed message? Ok below is my say signed message.
-----...
1
vote
1answer
52 views
How to sign a PSBT transaction?
I have a PSBT (in Base64 format) which I need to sign using GoLang, but I can't figure out which steps I need to do that. I found this but I'm not really confident with Bitcoin and Python, so I didn't ...
1
vote
1answer
70 views
What is “signature recovery”?
Bolt #11 defines a "tagged field," n, which identifies the payee by a public key, but it isn't required. It also requires a signature which can be verified only if the public key is known. When ...
1
vote
0answers
24 views
signing message [duplicate]
I'm trying to sign a message with the Bitcoin Core version v0.19.0.1 wallet. But when I do I see the message "the entered address does not refer to a key." is there a way to sign a message with the ...
0
votes
1answer
88 views
Calculate Z from r and s
Can anyone explain me any clearly answer or code in python with examples how we can calculate Z value from r and s and inputs outputs order ?? I search in google and youtube and i not saw any ...
0
votes
1answer
20 views
Understanding assurance contract in bitcoin scripts
I'm having a bit of trouble understanding example 3, the bit coin assurance contract on the bitcoin wiki(https://en.bitcoin.it/wiki/Contract) where senders choose to donate money only if 1000BTC total ...
6
votes
1answer
434 views
Why is there no such thing as a redirected, forged, or fake transaction?
In the past, we had numerous questions about "fake" or "forged" transactions. Such transactions could supposedly be created even without holding any bitcoins, yet would end up in the mempool or even ...
0
votes
2answers
33 views
How to verify signature in java using message and public key?
I was trying different things to verify the signature but couldn't succeed.
I have got the following:
message in string or decimal array (ASCII code for each char)
public key in decimal array (which I ...
3
votes
1answer
86 views
Sign manually P2WSH native with Openssl
I'm studying the segwit part, and I want to sign P2WSH (native) manually (openssl).
I just read the BIP0143 and I see the new transaction digest.
Double SHA256 of the serialization of:
1. ...
0
votes
0answers
85 views
What does sigscript and witness mean?
I tried using the R scanner from the following link https://github.com/ca333/rng-scanner/blob/master/rscan.py, then I got results like this
Bitcoin Address : 3EZ5yV5FARDqEZTXzwWNt33XLVhv7hqAS2
R: ...
0
votes
1answer
29 views
difference between signing a message and signing a p2sh
can i use the sign message function to sign the serialized hex for a p2sh transaction? Are the ecdsa functions used the same or are they different? It looks like the output is in a different format ...
0
votes
0answers
23 views
Need help with signing transactions in Java. I am using Bouncy Castle for ECDSA
I have successfully created the raw transaction that needs to be signed. I passed the big-endian (also tried little-endian) hash256 of the raw transaction to the ECSA.sign() method (implementation ...
1
vote
1answer
52 views
How to Verify P2SH Signature
I am trying to debug an issue where i believe i might have a bad signature but i am trying to figure out how to approach it.
What is this a signature of. Private key + what (redeem script? entire raw ...
0
votes
2answers
168 views
How to find Reused R values
I use software from https://github.com/ca333/rng-scanner , I try to find r that is reused. from the software I found results
Bitcoin Address : 1GQdrgqAbkeEPUef1UpiTc4X1mUHMcyuGW
In Input NR : 141 ~ ...
1
vote
2answers
63 views
Multisignature technology in bitcoin - math and code
I am interested in the math and code behind bitcoin multisignature technology. I've been looking for actual code that creates a multisignature address/pub key, and verifies transactions/digital ...
0
votes
1answer
278 views
How do I to get the r, S and Z values from a raw transaction (version 2)
For example I have this raw transaction
...
2
votes
2answers
76 views
P2SH non-segwit and no multi-sig
I have a P2SH no segwit address (regtest) I create the redeem script with SHA256 and RIPEMD160 of my public key and prepend 0x0014
---------- Redeem Script ---------
...
0
votes
1answer
45 views
Where to find the amount that is being sent in a signed transaction? [closed]
I was looking at a transaction I just signed for USDT and I decoded it to compare stuff to my original address and amount. Just to be careful.
I found the address that the data is being sent to in ...
3
votes
1answer
101 views
Sign P2SH transaction with Openssl
I have an P2SH 1-3 and I want to use openssl to sign a transaction.
my redem script is
...
0
votes
2answers
47 views
Segwit Bitcoin Transaction Signing
As I could understand, we can recover the R and the S values from any transaction following the ScriptSig where we have DER serialization.
Segwit transactions, where the signature will be in the ...
1
vote
1answer
82 views
Sign transaction legacy with Openssl
I want to understand how Bitcoin sign transactions with Openssl. I saw this post But I have some issues.
Above my private and public keys.
Private keys:
$ cat chiave_priv_3.pem
-----BEGIN EC ...
0
votes
0answers
41 views
Sign Raw Segwit (P2WPKH) Transaction Digest
I have a simple transaction that I want to sign the digest of, but I'm not sure if I've got the raw transaction correct, therefore my digest is incorrect.
The transaction has one input and one output,...
0
votes
1answer
64 views
Signmessagewithprivkey result is different than txinwitness
I'm studying segwit and I'm doing some experiment in regtest.
I create a raw transaction with P2SH address.
My Transaction data without signature is:
...
0
votes
0answers
32 views
How does HASHSIG work?
I am reading an article about how HASHSIG works, but i don't understand this:
Before the signature is computed, several temporary changes are made to the transaction:
The signature script of the ...
1
vote
1answer
52 views
What goes in the tx hash preimage when signing with 0x83 (SINGLE|ANYONECANPAY)?
I have script to create a P2WPKH to P2WPKH transaction (1 input, 1 output) and sign it with the sighash type 0x01 SIGHASH_ALL.
Which fields would I need to change in the tx digest preimage to turn ...
2
votes
2answers
959 views
What are the DER signature and SEC format
I often see those 2 elements in bitcoin documentations and tutorials but I have not yet find a proper definition on the internet for DER signature and SEC format.
0
votes
1answer
47 views
What is the signature digest for Segwit outputs
(Assume there's no OP_CODESEPERATOR)
For standard P2PKH, the signature digest is generated this way:
NewTransaction
settle the TxOuts well
set all TxIn scripts to empty
insert the Previous Locking ...
5
votes
2answers
194 views
Can signature be re-used to cash out everything in the address?
I Know for the P2PK locking script it was like this
[pubkey] <OP_CHECKSIG>
and then an unlocking script is provided as simple as this:
[sig]
But if it works like this, others can simply grab ...
0
votes
1answer
36 views
Do transactions need to be signed
I always thought a transaction can be accepted when all its inputs are correctly provided with their unlock script (which usually contains a signature) ——yes transactions may also be rejected with ...
0
votes
1answer
43 views
Query Reagrding DER Signature
(For Bitcoin TestNet Only)
I am working on Signed Transaction which consists More than One Inputs and More than One Outputs (Unsigned HEX Data).
after that i have generated two DER Signature of both ...
1
vote
1answer
148 views
How to verify a signed message in Java?
I want to verify, in Java, a signature produced with bitcoin core's signmessagewithprivkey (equivalent to the verifymessage). I noticed a bitcoinj method similar to the bitcoin core's verifymessage - ...
3
votes
1answer
78 views
Why does a same transaction signed separately have different witness values?
I signed a bitcoin testnet transaction using nbitcoin library and got an output:
...
4
votes
1answer
465 views
Signing a raw transaction with multiple inputs
So I am creating a simple P2PKH transaction and after I researched about this found few useful posts and answers here; I was able to successfully spend a a single P2PKH UTXO but it is really getting ...
0
votes
1answer
23 views
Difficulty in verifying bitcoin-core signing keys
How can I verify bitcoin0.19 signature bwith gpg?
I read I should use gpg --recv-keys signingkey, but I don't understand where is the file signiggkey. I tried to download Bitcoin Core Release Signing ...
2
votes
1answer
133 views
Bitcoin and encryption
To the best of my understanding Bitcoin uses encryption to create the digital signature, basically, by encrypting the hashed message (transaction?).
Would like to get your expert opinion to my claim ...
0
votes
1answer
166 views
Cannot sign txn with change address using bitcoinjs-lib psbt
I am having a difficult time figuring out how to sign a spend from a change address. I get Error: cannot sign for this input with the key <value>. The initial transaction works fine, where I ...
1
vote
0answers
43 views
How can I check my transaction signature is correct?
I have tried recreating the exact transaction from "Appendix B: Funding Transaction Test Vectors" from BOLT 3 from the Lightning RFCs. My transaction looks exactly the same when parsed, except my ...
1
vote
0answers
86 views
Getting Error “Unable to sign input, invalid stack size (possibly missing key)”
I have created a key from using coinstring, and then imported it into my wallet. Then I ran:
bitcoin-cli signrawtransactionwithkey "$rawtxhex" "[\"$mykey$\"]"
But it results in:
Unable to sign ...
1
vote
0answers
38 views
Is possible extract the original script P2MS from the transaction locked with the P2SH address?
This is a stupid question because if the P2SH contains the hash160 (and the hash160 contains the sha256) of the P2MS doesn't possible return to the original hex P2MS.
So, but for verifying the P2SH I ...
2
votes
0answers
91 views
2
votes
1answer
104 views
how difficult is it to generating an ECDSA (or Schnorr) signature with a certain number of leading zeros?
If both the public key and the private key are known ahead of time (public knowledge), and the goal is to choose a message/nonce that generates a signature with, for example, a certain number of ...
0
votes
1answer
46 views
Multiple inputs with one signature
From this question I've learned that a transaction with N inputs requires N sign operations.
But what if there a huge amount of inputs? E.g. I have a coffee shop and I sell 5000 pcs coffee every day ...
6
votes
1answer
466 views
Will Schnorr Multi-signatures completely replace ECDSA?
I stumbled upon the fact that schnorr signatures will most probably replace the current ECDSA system in a future BIP.
Is it worth learning about ECDSA or this will become obsolete/useless/confusing ...
0
votes
2answers
231 views
Difference between Sign Message and Sign Transaction
Using "Sign Message" one can prove ownership of an address.
This happens by signing a human-readable string using the private key belonging to the address.
The owner then provides the address, message ...
1
vote
0answers
71 views
How to sign an Altcoin transaction manually with 2 inputs and 2 outputs
So i'm working with the altcoin denarius which has the following raw TX structure. This is a transaction I am try to sign:
Original:
...
0
votes
1answer
47 views
Source and (mis)handling of the private key for a basic tx
I'm looking to get "hands on" with signing, however when I adapt Runeks' thorough answer at https://bitcoin.stackexchange.com/a/5241/89798 my code invariably fails reporting that I've used the wrong ...
2
votes
1answer
224 views
Verifying a bitcoin Signature and what is the transaction data that is signed?
Given a bitcoin transaction where it is able to redeem it's UTXO's, how can I verify in Java if the signature is actually a valid signature or not. I was trying to use the Bouncy Castle library where ...
